Cryptographic Token Interface Standard

PKCS#11

General block cipher MAC

Cipher <NAME> has a MACing mechanism, "<NAME>-MAC", denoted CKM_<NAME>_MAC. This mechanism is a special case of the CKM_<NAME>_MAC_GENERAL mechanism described in Section 12.18.5. It always produces an output of size half as large as <NAME>'s blocksize.

This mechanism has no parameters.

Constraints on key types and the length of data are summarized in the following table: 




 Table 84, General Block Cipher MAC: Key And Data Length   
Function Key type 

Data length

 

Signature length

   


C_Sign <NAME> 

any

 

LOWER(blocksize/2)

   


C_Verify <NAME> 

any

 

LOWER(blocksize/2)

  

 



 
 



RSA Security Inc. Public-Key Cryptography Standards - 
PKCS#11 - v210